freeipa/ipaplatform/debian
Florence Blanc-Renaud 7ae1352c72 Support opendnssec 2.1.6
The installation of IPA DNS server is using ods-ksmutil, but
openddnssec 2.1.6 does not ship any more /usr/bin/ods-ksmutil. The tool
is replaced by /usr/sbin/ods-enforcer and /usr/sbin/ods-enforcer-db-setup.

The master branch currently supports fedora 30+, but fedora 30 and 31 are
still shipping opendnssec 1.4 while fedora 32+ is shipping opendnssec 2.1.6.
Because of this, the code needs to check at run-time if the ods-ksmutil
command is available. If the file is missing, the code falls back to
the new ods-enforcer and ods-enforcer-db-setup commands.

This commit defines paths.ODS_ENFORCER and paths.ODS_ENFORCER_DB_SETUP
for all platforms, but the commands are used only if ods-ksmutil is not found.

Fixes: https://pagure.io/freeipa/issue/8214
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-12 21:48:25 +01:00
..
__init__.py ipaplatform: Add Debian platform module. 2017-01-19 16:45:42 +01:00
constants.py named.conf: Disable duplicate zone on debian, and modify data dir 2018-05-29 17:03:56 +02:00
paths.py Support opendnssec 2.1.6 2020-03-12 21:48:25 +01:00
services.py Debian: Use RedHatCAService for pki-tomcatd 2019-04-24 14:08:20 +02:00
tasks.py Use only TLS 1.2 by default 2019-07-01 14:55:29 +02:00